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1 METHODS AND APPARATUS TO AUTHENTICATE A DOCUMENT 

2 

3 BACKGROUND 

4 Electronic documents are routinely sent from one person to another via the 

5 Internet or over other networks. During transmission it is possible that an electronic 

6 document can be intercepted and altered, or become corrupted in transmission. In 

7 many instances an altered document can have significant consequences. For example, 

8 if a contract in the way of an electronic document were intercepted and altered to 

9 remove the word "not", or to change a dollar value, it could have significant financial 

10 implications. It is therefore desirable to be able to verify the authenticity of an electronic 

1 1 document that is transmitted from a sender to a receiver by way of a network or other 

12 means. 
13 

14 SUMMARY 

15 A first embodiment the present invention provides for a method of generating an 

16 authentication key that can be used to authenticate an electronic document file 

17 representative of a document. The method includes providing the electronic document 

18 file as an initial digital file, and applying a predetermined halftoning process to the digital 

19 file to generate a digital halftone file of a plurality of discrete digital values. A 

20 predetermined mathematical process is then performed on the plurality of discrete digital 

21 values to thereby generate the authentication key. 

22 Another embodiment of the present invention provides for a system to generate 

23 an authentication key to be used to authenticate an electronic document file 

24 representative of a document. The system includes a processor and a computer 

25 readable memory device which is readable by the processor. The computer readable 

26 memory device contains a series of computer executable steps configured to cause the 

27 processor to perform the following steps: retrieve a copy of the electronic document file 

28 as an initial digital file; apply a predetermined halftoning process to the initial digital file to 

29 generate a digital halftone file comprising a plurality of discrete digital values; perform a 

30 predetermined mathematical process on the plurality of discrete digital values to thereby 

31 generate the authentication key; and store a copy of the authentication key in the 

32 computer readable memory device. 

33 These and other aspects and embodiments of the present invention will now be 

34 described in detail with reference to the accompanying drawings, wherein: 

35 
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1 DESCRIPTION OF THE DRAWINGS 

2 Fig. 1 is a flowchart depicting a method in accordance with a first embodiment of 

3 the present invention. 

4 Fig. 2 is a flowchart depicting a method in accordance with a second embodiment 

5 of the present invention. 

6 Fig. 3 is a schematic diagram depicting a system in accordance with another 

7 embodiment of the present invention. 

8 Fig. 4 is a schematic diagram depicting a system in accordance with a further 

9 embodiment of the present invention. 
10 

11 DETAILED DESCRIPTION 

12 Non-limiting embodiments of the present invention provide for methods and 

13 apparatus for generating an authentication key for an electronic document file at a 

14 source of the electronic document file (such as a sender or creator of the electronic 

15 document file), and verifying the authenticity of an electronic document file by generating 

16 an authentication key for the electronic document file at a receiver location of the 

17 electronic document file. The receiver of the electronic document file can then compare 

18 the authentication key generated by the receiver at the receiver location to the 

19 authentication key generated at the source. If the two authentication keys match, then 

20 the authenticity of the electronic document file as received by the receiver is verified. As 

21 will be described more fully below, the authentication key can be generated using a 

22 halftoning process (i.e., using a halftoning algorithm). 

23 Halftoning is a process that is used to convey gray scale information in printers 

24 which typically can print only black or white. Halftoning techniques are also used in color 

25 printers (discussed more fully below). Many halftone concepts and terms now used in 

26 electronic printing originated with the classic offset printing press. Printing presses can 

27 usually print areas of single intensity as they have only an ability to apply ink to a page 

28 or not apply ink to the page. This limited ability results in only two colors, i.e., that of the 

29 ink and that of the print media. By varying the size of printed dots, however, it is 

30 possible to give the impression of various shades of gray. 

31 In electronic black and white printers, gray scales are accomplished by building a 

32 palette of grays that consists of clusters of black dots. A given cluster with more black 

33 dots is darker, while a cluster with less black dots is perceived as a lighter gray. 

34 Halftone principles and procedures are applicable to color printers as well. In a 

35 color printer, the halftone technique is applied to each color plane (usually Cyan, 
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1 Magenta, Yellow and blacK (CMYK)). Instead of generating only shades of gray, the 

2 printer provides mixtures of varying intensities of the four color planes. Layering of those 

3 variable intensity color planes enables the printing of a generally "full color" document. 

4 In addition to halftoning for printing purposes, halftoning techniques can also be 

5 used in the display of an image, such as on a computer monitor. 

6 Digital halftoning can thus be defined as a collection of techniques employed by 

7 various computer-controlled display and printing devices for converting continuous-tone 

8 images into binary information for displaying the image. The display or printed image is 

9 comprised of many individual picture elements, known as "pixels." The computer 

10 generates data corresponding to the tone of the pixels to be displayed or printed. 

11 Hereafter, this data will be alternatively referred to as input tone values or tone value 

12 data. 

13 The conversion and display of the tone value data is often referred to as 

14 rendering. As part of the rendering, the tone value data is associated with halftoning 

15 cells with which the display area is logically tiled. The pixels of those cells are colored 

16 (printed or displayed) in accord with the underlying halftoning technique. The halftoning 

17 techniques, or algorithms, can be generally broken-down into two classes. 

18 One class of halftoning techniques comprises those algorithms that are relatively 

19 simple from a computational standpoint, thus providing good rendering speed. 

20 Exemplary of this first class of halftoning algorithms are those known as matrix-based, 

21 pattern, or ordered-dither algorithms. 

22 Another class of halftoning algorithms includes those generally labeled as "error 

23 diffusion" halftoning algorithms. A popular version of an error diffusion halftoning 

24 algorithm is known as Floyd-Steinberg error diffusion. With this technique, the tone 

25 value of each pixel is examined (for colored output, the tone values include those of 



26 each colorant) and compared to a threshold value provided by the algorithm. If the 

27 incoming tone value exceeds the threshold, an output pixel is generated and the 

28 difference between the output and input values (error) is diffused among four 

29 neighboring pixels. For example, the pixel immediately to the right of the current pixel is 

30 assigned 7/16 of the error (the error can be positive or negative), the pixel beneath that 

31 one is assigned 1/16 of the error, the pixel beneath the current pixel is assigned 5/16 of 

32 the error, and the pixel to the left of that one is assigned 3/16 of the error. To further 

33 break-up geometric artifacts or patterns, some noise may be added to the error terms. 

34 The averaged value of the noise is 0, however, so that the image is not lightened or 

35 darkened as a result. 
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1 Examples of halftoning algorithms are provided in U.S. Patents Nos. 5,313,287 

2 ("Imposed weight matrix error diffusion halftoning of image data"), 5,949,964 ("Method 

3 and apparatus for halftoning of images in a printer"), and 6,002,804 ("Tone dependent 

4 variable halftoning with adjustable algorithm selection"), all of which are assigned to the 

5 assignee of the present application. 

6 Following halftoning of an initial digital file, such as an electronic document file, a 

7 digital halftone file is produced. The digital halftone file can then be used by a processor 

8 resident within an imaging device, typically with additional processing, to enable the 

9 imaging device to print a tangible copy of a document represented by the electronic 

10 document file. The digital halftone file is a bitmap file comprised of a plurality of discrete 

11 digital values, and as such is capable of being numerically processed to generate an 

12 authentication key according to the methods described further herein, in accordance with 

13 the present invention. 

14 Typically, in a printing process, the halftoning algorithms are resident within a 

15 computer readable memory device (such as a random access memory, or RAM) 

16 resident within an imaging device. The term "imaging device" or "printing device", as 

17 used herein, is intended to include, for example, stand-alone printers (such as ink jet 

18 printers, laser printers, etc.), photocopiers, and combination devices (known as "multi- 

19 function peripherals"). As indicated above, halftoning algorithms are frequently 

20 proprietary to the manufacturer of the imaging device. Further, since halftoning 

21 algorithms are typically embedded within a ROM device they are difficult for a user to 

22 access and thus reverse engineer. For this reason using the halftoning algorithm to 

23 generate an authentication key provides a fairly high degree of security since the 

24 halftoning algorithm used to generate the authentication key is not easily accessed. 

25 As indicated above, embodiments of the present invention allow a first user (a 

26 "sender") to generate an authentication key for an electronic document file by halftoning 

27 the electronic document file, and then using the resulting digital halftone file to generate 

28 the authentication key. The user can then transmit the electronic document file to a 

29 second user (a "receiver") over a network. The sender can also transit the 

30 authentication key to the receiver (typically separately from transmission of the electronic 

31 document file). The receiver can then use the electronic document file to generate an 

32 authentication key ("receiver authentication key 1 ') in the same manner as described 

33 above with respect to the sender. The receiver can then compare the authentication key 

34 received from the sender with the receiver authentication key. If the two keys match, it is 

35 highly probable that the electronic document file was not altered or corrupted between 
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1 the time the sender generated the sender's authentication key and the time the receiver 

2 generated the receiver authentication key. 

3 Since halftoning algorithms are frequently proprietary to the manufacturer of an 

4 associated imaging device, the digital halftone file generated by one make and model of 

5 an imaging device will typically be different than the digital halftone file generated by a 

6 different make and model of an imaging device. Since the authentication key is 

7 generated using the digital halftone file, authentication keys generated using different 

8 halftoning algorithms typically will not match. Accordingly, two users of methods and 

9 apparatus described further below will generally need to have access to the same 

10 halftoning algorithm, either by way of having essentially similar or identical imaging 

11 devices, of by having the halftoning algorithms accessible by other means (such as 

12 resident within a user computer). 

13 Turning now to Fig. 1, a flowchart 100 depicts a method in accordance with a first 

14 embodiment of the present invention. As will be described more fully below, the method 

15 depicted by the flowchart 100 can generally be described as a method of generating an 

16 authentication key that can be used to authenticate an electronic document file 

17 representative of a document. The flowchart 100 will be described with respect to a 

18 "sender" performing the method. The method includes providing the electronic 

19 document file as an initial digital file. Thus, at step 101 the sender creates or retrieves 

20 (from computer readable memory) the electronic document file. For example, using a 

21 "sender computer" (such as a personal computer) the sender can select the electronic 

22 document file for which an authentication key is to be generated. 

23 The method next includes applying a predetermined halftoning process to the 

24 digital file to generate a digital halftone file comprising a plurality of discrete digital 

25 values. Thus, at step 103 the sender submits the initial digital file to a halftoning 

26 processor to generate the digital halftone file. For example, the user can transmit the 

27 electronic document file to an imaging device, such as an ink jet printer, and a processor^ 

28 resident within the printer can generate the digital halftone file as part of the normal 

29 printing process. As indicated above, exemplary halftoning processes include, without 

30 by way of limitation, error diffusion halftoning algorithms, matrix-based halftoning 

31 algorithms, pattern-based halftoning algorithms, and ordered-dither halftoning 

32 algorithms. 

33 Once the digital halftone file is generated, then a predetermined mathematical 

34 process is performed on the plurality of discrete digital values (in the digital halftone file) 

35 to thereby generate the authentication key, as indicated at step 105 of the flowchart 100. 
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1 As will be described in fuller detail below, the predetermined mathematical process can 

2 be part of an authentication key generation routine stored in a ROM device within the 

3 imaging device, and can take the form of a number of different mathematical algorithms 

4 (so long as the sender and the intended receiver of the electronic document file use the 

5 same algorithm). One example of a mathematical process that can be performed on the 

6 digital halftone file is a simple summation of the digital values representative of all of the 

7 halftoned pixels which make up the image. For example, in a four color printing process, 

8 each pixel will be represented by four 8-bit values. All of the 8-bit values can be added 

9 together, and the resulting sum is the authentication key. As this can be a rather large 

10 number, even when presented to a user in hexadecimal form, the mathematical process 

11 can further include truncating all but a predetermined number of final digits, for example, 

12 the last six digits. Another exemplary mathematical process that can be performed on 

13 the digital halftone file is a simple summation of the last binary number of the digital 

14 values representative of the halftoned pixels. This results in a much smaller final 

15 number, but can decrease the probability that any two different electronic document files 

16 (e.g., an original document file and an altered document file) will render different 

17 authentication keys. 

18 With respect to Fig. 1, at step 107 the method can include printing the digital 

19 halftone file to provide a tangible copy of the document containing a visible 

20 representation of the authentication key. Alternately, only the authentication key can be 

21 printed since the sender may not desire to have a printed copy of the document at that 

22 time, but may wish to have a copy of the authentication key. Further, rather than printing 

23 the document and/or the authentication key, one or both of the document and the 

24 authentication key can be displayed on a user display, such as a computer monitor, to 

25 provide a visible (non-tangible) copy of the document and/or the authentication key. In 

26 any event, after the authentication key has been generated, the sender typically will save 

27 a copy of the authentication key for later authentication and verification purposes. 

28 At step 109 of the flowchart 100 the sender can transmit the electronic document 

29 file (in the form of the initial digital file) to the receiver (i.e., intended recipient) of the 

30 document. For example, the sender can send the electronic document file to the 

31 receiver as an attachment to an e-mail, or by placing the document file on a commonly 

32 accessible server. The electronic document can be sent to the receiver over a global 

33 network (e.g., the Internet), via a local or wide area network, or by other means for 

34 transmitting electronic document files from a first location (sender location) to a second 

35 location (receiver location). 
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1 It will also be appreciated that the method depicted in the flowchart does not 

2 require the transmission step 109. For example, as indicated earlier, following saving 

3 the authentication key at step 107, the "sender" can store the electronic document on a 

4 server or the like where access by third parties is possible. Thereafter, the "sender" can 

5 use the authentication key (as described further below) to verify that the document has 

6 not been altered. 

7 At step 111 of the flowchart 100 the authentication key can be separately 

8 communicated to the receiver (i.e., separate from the electronic document file as 

9 transmitted to the receiver at step 109). For example, the sender can send the 

10 electronic document file and the authentication key to the receiver as attachments to 

11 separate e-mails. Alternately, for example, the sender can send the authentication key 

12 to the receiver by facsimile, or by voice message (as for example, via a telephone), by 

13 cellular phone text message, etc. Further, the electronic document file and the 

14 authentication key can be transmitted to the receiver together. Since, as described 

15 above, the authentication key is dependent on the halftoning algorithm used to generate 

16 the halftone digital file, and since a third party who may intercept the electronic 

17 document file will typically not know which halftoning algorithm was used to generate the 

18 authentication key, it is unlikely that a third party will be able to alter the electronic 

19 document file without affecting the authentication key generated by the receiver. 

20 Turning now to Fig. 2, a flowchart 120 depicts a method in accordance with a 

21 second embodiment of the present invention. As will be described more fully below, the 

22 method depicted by the flowchart 200 can generally be described as a method of 

23 authenticating an electronic document file representative of a document. That is, 

24 whereas the flowchart 100 of Fig. 1 represents a method that can be used by a "sender" 

25 to generate an authentication key for an electronic document file, the flowchart 120 of 

26 Fig. 2 represents a method that can be used by a receiver to subsequently authenticate 

27 the electronic document file using the authentication key. Consequently, at step 121 the 

28 receiver receives the electronic document file as an initial digital file. As indicated above 

29 with respect to the discussion of Fig. 1 , and especially step 109 thereof, the "sender" and 

30 "receiver" can be different entities, or the same entity. As also indicated above, the 

31 receiver can receive the document in any number of ways as indicated above, including 

32 via a network, on tangible memory media (such as a CD ROM), etc. 

33 At step 123 of Fig. 2, and as described above with respect to step 1 1 1 of Fig. 1, 

34 the receiver also receives the authentication key that was generated by the sender (that 

35 is, the key generated following the method generally described above with respect to 



Case 100201951-1 



1 Fig. 1). As indicated above, the receiver can receive the authentication key from the 

2 sender in any number of ways as indicated above, including via an e-mail, a telephonic 

3 message, facsimile, etc. The sender then generates a "sender 1 ' authentication key using 

4 the electronic document file received from the receiver. That is, at step 125 the receiver 

5 submits the electronic document file to a halftoning processor to generate a digital 

6 halftone file (in substantially the same manner as described above with respect to step 

7 103 of Fig. 1), and at step 127 (Fig. 2) the halftoned digital file is mathematically 

8 processed (in substantially the same manner as described above with respect to step 

9 105 of Fig. 1) to generate an authentication key (the "receiver authentication key"). As 

10 described above, the halftoning process (halftoning algorithm) used by the sender in 

11 generating the initial authentication key, and the halftoning process used by the receiver 

12 in generating the "receiver authentication key", generally need to be the same halftoning 

13 process. Likewise, the mathematical process used by both the sender and receiver to 

14 generate the key from the digital halftoned files needs to be the same. 

15 After the receiver has generated the authentication key at step 127 (Fig. 2), then 

16 at step 129 the receiver can print or otherwise display (via a computer monitor, for 

17 example) the user-generated authentication key. At this point, the receiver has both 

18 authentication keys (the one received from the sender and , the one generated by the 

19 receiver), and at step 131 the receiver can then use the authentication keys to 

20 authenticate the electronic document file. That is, at step 133 the user can compare the 

21 two keys to one another and, if the two keys match, then the receiver has verified the 

22 authenticity of the electronic document file received at step 121 . However, if at step 133 

23 the keys do not match, then the authenticity of the electronic document file received at 

24 step 121 is suspect, and the receiver can take whatever steps are deemed appropriate. 

25 It will be appreciated that the flowcharts 100, 120 of respective Figs. 1 and 2 

26 together represent but one example of a method for generating a document 

27 authentication key for an electronic document file, and using the authentication key to 

28 authenticate the electronic document file, in accordance with the present invention. It 

29 will be further appreciated that the flowcharts 100, 200 are exemplary only, and that 

30 additional and/or different steps can be used, and the steps performed in a different 

31 order, all in accordance with embodiments of the present invention. 

32 Turning now to Fig. 3, a system 200 in accordance with a third embodiment of the 

33 present invention is depicted in a schematic diagram. As will be described in more detail 

34 below, the system 200 can generate an authentication key which for use in 

35 authenticating an electronic document file representative of a document, and can also be 
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1 used to authenticate an electronic document file representative of a document. The 

2 system 200 can be used, for example, to perform either or both of the methods indicated 

3 by flowcharts 100, 120 of respective Figs. 1 and 2, and variations thereof. It will be 

4 appreciated from the following description that the system 200 depicted in Fig. 3 is 

5 exemplary only, and that additional, fewer and/or different components can be used to 

6 equal effect. 

7 The system 200 includes a processor and a computer readable memory device 

8 which is readable by the processor. As depicted in Fig. 3, the system 200 includes a 

9 local user processor 202 which is in signal communication with a local user computer 

10 readable memory device ("user memory") 210. The user memory 210 can include 

11 random access memory components (RAM 212) and read only memory components 

12 (ROM 216). The system 200 further includes an imaging device 230 ("Printer 1"), which 

13 in turns includes an internal "printer" processor 232 and internal computer readable 

14 memory device ("printer memory") 234 that is in signal communication with the printer 

15 processor 232. The printer memory 234 can include random access memory 

16 components (RAM 236) and read only memory components (ROM 238). The printer 

17 230 further includes document printing components 254, such as imaging media supply 

18 trays, media transport devices to move imaging media through the printer 230, and 

19 image forming components to form images on the media. The specific document 

20 printing components 254 provided will depend on the general process used for image 

21 forming (e.g., ink jet printing or laser printing), however document printing components 

22 254 are well understood in the art, and need not be described further herein. 

23 While Fig. 3 depicts the system 200 as having two processors 202, 232, and two 

24 computer readable memory devices 210, 234, a system having only a single processor 

25 and/or a single computer readable memory device can be provided to equal effect. 

26 Further, functionality described below with respect to a specific processor 202, 232, or a 

27 specific computer readable memory device 210, 234, does not necessarily have to be 

28 performed by the indicated processor or memory device, but can be performed by the 

29 other processor or memory device (respectively). Thus, for example, while a halftoning 

30 process is typically performed within a document printing device (e.g., printer 230), this 

31 is not a requirement, and the halftoning process can be performed in the user processor 

32 202. Likewise, generation of the authentication key from the digital halftone file can be 

33 performed by either user processor 202 or printer processor 232. 

34 The local user processor 202 can be, for example, a personal computer. 

35 Accordingly, the user processor 202 can be in signal communication with a user input 
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1 device such as keyboard 204, and a display device such as monitor 206. The user 

2 processor 202 can be placed in signal communication with a network 256, such as the 

3 Internet, a LAN, or a WAN, for example, via a modem 208 and a network card 9not 

4 shown) resident within the user computer 202. 

5 The system 200 can further include a secondary printer 252 ("Printer 2"). As will 

6 be described more fully below, Printer 1 230 can be configured to perform authentication 

7 methods in accordance with embodiments of the present invention, while Printer 2 252 

8 can be incapable of performing authentication methods in accordance with embodiments 

9 of the present invention. More specifically, Printer 1 230 can include the halftoning 

10 algorithm 246 used by both a sender and receiver of an electronic document in the 

11 authentication key generation process, as described above with respect to Figs. 1 and 2. 

12 The further details of Fig. 3 will first be described, followed by a description of 

13 how the system 200 can be used to perform methods in accordance with the present 

14 invention. 

15 As depicted in Fig. 3, user memory RAM 212 can store the electronic document 

16 file 214 that is to be authenticated. Likewise, user memory RAM 212 can also store the 

17 authentication key 220. User ROM 216 can include a series of computer executable 

18 steps (executable by user processor 202) in the form of an authentication routine 218. 

19 For example, authentication routine 218 can be a separate user executable program, or 

20 a subroutine of an applications program (such as a word processing program or a 

21 spreadsheet program). In one exemplary embodiment, authentication routine 218 is 

22 accessible from a word processing program. After a user has created or accessed the 

23 document file 214, the user can then select a "file / authentication" menu option from the 

24 word processing applications program. The authentication menu option can enable a 

25 dialog box (displayed on display 206) to allow a user to select such options as "generate 

26 authentication key only" or "print document with authentication key." The dialog box can 

27 also allow a user the options to either display the authentication key using the user 

28 display 206, or to print the authentication key using printer 230 or 252, to save the 

29 authentication key to memory location 220, or even to e-mail the key to a receiver using 

30 the modem 208. 

31 The printer RAM 236 can store the initial digital file (or portions thereof) received 

32 from the user processor in memory location 240, and can store the digital halftoned file 

33 of the initial digital file in memory location 242. The authentication key can be stored in 

34 printer RAM memory location 244. 
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1 The printer ROM 238 can include a halftoning routine and algorithm 246 which is 

2 configured to cause the printer processor 232 to produce a digital halftone image file 

3 from an initial image file. That is, the halftoning routine 246 can cause the printer 

4 processor 232 to retrieve a copy of the electronic document file from printer RAM 240, 

5 convert the initial digital document file 240 to a digital halftone file, and store the digital 

6 halftone file in printer RAM location 242. 

7 The printer ROM 238 can further include an authentication key generation routine 

8 248, which comprises a series of computer executable steps configured to cause the 

9 printer processor 232 to perform a predetermined mathematical process on the plurality 

10 of discrete digital values that make up the digital halftone file 242 to thereby generate the 

11 authentication key, and store a copy of the authentication key in the printer RAM 

12 memory location 244. The authentication key generation routine 248 can also contain 

13 additional executable steps to provide further options for the generation and transfer of 

14 the authentication key, as will be described more fully below. 

15 The printer ROM 238 can further include printing routines 250 which are used to 

16 control the document printing components 254 during the imaging of sheet media, as 

17 well as to perform other control functions in the printer 230. 

18 It will be appreciated that display 206 and user input device (keyboard) 204 can 

19 be in signal communication with the printer processor 232 rather than the user processor 

20 202, and that the authentication routine 218 can be resident within printer ROM 238. 

21 Accordingly, the generation of the authentication key can be fully supported by an 

22 imaging device (printer 230) without requiring an external processor. For example, when 

23 user input device 204 is coupled to printer processor 232, a user can specify that a 

24 specific print job sent to the printer 230 is to include generation and printing of an 

25 authentication key. 

26 One exemplary use of the system 200 to generate a document authentication key 

27 will now be described. However, it will be appreciated that a number of different 

28 variations of the use of the system 200 are possible, all within the spirit of the present 

29 invention. In the following example it will be assumed that a user wishes to print a 

30 document and also generate and print an authentication key for the document. 

31 Accordingly, a user accesses an electronic document file 214 via user processor 202 

32 and keyboard 204. The user can then use the authentication routine 218 to indicate that 

33 the document represented by the electronic document file 214 is to be printed as a 

34 tangible copy, and that an authentication key is to be generated for the document file 

35 and also printed with the document, either as a separate page or on the printed 
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1 document itself. A print job, bearing the electronic document file and the authentication 

2 key instructions, is then transmitted to the printer 230. The printer processor 232 stores 

3 the electronic document file in printer RAM 240. The printer processor 232 then calls the 

4 halftoning routine 246, which renders the initial digital file 240 as a digital halftoned file, 

5 which is then stored in printer memory 242. Thereafter, acting on the authentication key 

6 instruction included with the print job, the printer processor 232 calls the authentication 

7 key generation routine 248. The authentication key generation routine 248 performs the 

8 predetermined mathematical process (discussed above) on the discrete digital values 

9 which comprise the digital halftone file 242, to thereby generate the authentication key. 

10 The printer processor 232 then saves the authentication key in printer memory location 

11 244, and proceeds with printing the halftoned file 242 and the authentication key 244 

12 using printing routines 250. At this point the user can then transmit the document file 

13 214 to a receiver using the modem 208, and can communicate the authentication key to 

14 the receiver by any of the means discussed above (telephone, facsimile, e-mail, etc.). 

15 In one variation, rather than printing the authentication key, the printer processor 

16 232 can transmit the authentication key 244 to the user processor 202, and the 

17 authentication key can be stored in memory 220. The user can then display the 

18 authentication key on the display 206. 

19 As a further example of the use of the system 200, a receiver of an electronic 

20 document file can use the system 200 to authenticate the document file. Thus, following 

21 from the example just described of how a user (sender) can generate an authentication 

22 key for an original document file, the receiver has received both the electronic document 

23 file and the authentication key from the sender. The receiver stores the electronic 

24 document file in RAM location 214. It is assumed that the receiver has also received the 

25 authentication key generated by the sender, and has recorded the sender authentication 

26 key (as, for example by writing the authentication key on paper, or saving an e-mail 

27 containing the sender authentication key). The receiver then proceeds to generate a 

28 receiver authentication key using the electronic document file 214 in essentially the 

29 same manner as the sender generated the sender authentication key in the example 

30 described above. That is, the electronic document file 214 is rendered as a digital 

31 halftone image file by printer processor 232, and a receiver authentication key is 

32 generated using the halftone image file. The receiver can then compare the 

33 authentication key received from the sender to the authentication key generated by the 

34 receiver. If the two keys match, then the receiver's copy of the electronic document file 



Case 100201951-1 



1 is authenticated. However, if the two keys do not match, then the authenticity of the 

2 receiver's copy of the electronic document file is not verified. 

3 As discussed earlier, methods and apparatus described herein generally require 

4 that the same halftoning algorithm be used to generate the digital halftone file at the 

5 "sender" and "receiver 1 ' locations. Likewise, the "sender" and "receiver" generally need 

6 to apply the same mathematical process on the digital halftone file to generate the final 

7 authentication key. Accordingly, methods and apparatus described herein are 

8 particularly useful in an enterprise environment such as a "home office / field office" 

9 arrangement. For example, the field office can send the home office a proposed sales 

10 contract in the form of an electronic document file via a network connection (e.g., via the 

11 Internet), and the home office may wish to authenticate the electronic document file to 

12 ensure that it has not been altered during transmission. Since the home office and field 

13 office are typically related entities, it is easy to coordinate having printers at each 

14 location that include the appropriate halftoning algorithms and authentication key 

15 generating routines to allow electronic document authentication, as described herein, to 

16 be performed between the two locations. For example, a particular make and model of a 

17 printing device can be specified in a corporate setting as the printing device to be used 

18 for electronic document authentication processes, thus establishing a common 

19 halftoning algorithm to be used. Further, the manufacturer of a selected printing device 

20 can be consulted to determine a serial number range of a particular make and model of 

21 a printing device to ensure that all such printing devices used for electronic document 

22 authentication use the same halftoning algorithm. In certain instances, if a manufacturer 

23 has upgraded a particular make and model of a printing device with a new or modified 

24 halftoning algorithm, then printers to be used in an enterprise environment for electronic 

25 document file authentication can be provided with new firmware (the new or revised 

26 halftoning algorithm on a semiconductor, for example) so that all printing devices to be 

27 used for authentication purposes have the same halftoning algorithm. 

28 Fig. 4 is a schematic diagram depicting a system 300 in an enterprise 

29 environment that can be used to authenticate an electronic document file in accordance 

30 with yet another embodiment of the present invention. The system 300 is separated into 

31 a "Sender Side" 310 and a "Receiver Side" 350. As indicated from the above description 

32 of Figs. 1-3, the sender (sender side 310) is the source of the electronic document file 

33 that is to be authenticated by a receiver (receiver side 350) of the electronic document 

34 file. The sender side 310 of the system 300 includes a sender computer 312 (similar to 

35 user computer 202, Fig. 3) configured to provide an electronic document file in the form 
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1 of a sender initial digital file (e.g., document file 214, Fig. 3). The sender side 310 

2 (Fig. 4) further includes a sender printer 314, which can be similar to the printer 230 of 

3 Fig. 3. That is, sender printer 314 of Fig. 4 is configured to receive the sender initial 

4 digital file, apply a predetermined halftoning process to the sender initial digital file to 

5 generate a first digital halftone file comprising a first plurality of discrete digital values, 

6 and perform a predetermined mathematical process on the first plurality of discrete 

7 digital values to thereby generate a sender authentication key. Apparatus and methods 

8 for performing the just-recited functionality of sender printer 314 were described above in 

9 detail with respect to printer 230 of Fig. 3, and such apparatus and methods can be 

10 incorporated into the sender printer 314 of Fig. 4. In the example depicted in Fig. 4, the 

11 sender authentication key generated by the sender printer 314 is displayed on the 

12 printed, tangible copy of the document 320 as authentication key 322, here being the 

13 number "125691". However, as described above with respect to Fig. 3, the sender 

14 authentication key can also be displayed to the sender via a display device, such as 

15 monitor 206 of Fig. 3. 

16 The sender side 310 (Fig. 4) of system 300 can further include a network 

17 connection configurable to allow the sender computer 312 to send the sender's version 

18 of an initial digital file to a receiver computer 352 (described below). For example, the 

19 sender modem 316 can allow the sender computer 312 to connect to the Internet, or to 

20 an intranet, which can also be accessed the receiver computer 352 via receiver modem 

21 356. Alternately, the sender computer 312 can be provided with a network interface 

22 card (not shown) to allow the sender computer to communicate with a server as part of a 

23 LAN or WAN which is also accessible by the receiver computer 352. The sender side 

24 310 of system 300 can also be provided with a sender telephone and/or a sender 

25 facsimile machine 318 to allow the sender to communicate the sender authentication key 

26 to the receiver via a complimentary receiver telephone/facsimile 358. 

27 The receiver side 350 of the system 300 includes a receiver computer 352 

28 configured to receive the electronic document file from the sender side 310 as a receiver 

29 initial digital file. It will be appreciated that the receiver computer 352 can be configured 

30 the same as the sender computer 312' and the user computer 202 (of Fig. 3). The 

31 receiver side 350 further includes a receiver printer 354 configured to receive the 

32 receiver initial digital file, apply the predetermined halftoning process (i.e., the same 

33 halftoning process as applied by sender printer 314) to the receiver initial digital file to 

34 generate a second digital halftone file comprising a second plurality of discrete digital 

35 values. If the electronic document file has not been altered in the process of being 
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1 transmitted from the sender side 310 to the receiver side 350, then the second digital 

2 halftone file, and the second plurality of discrete digital values, produced by the receiver 

3 printer 354, should be identical to the first digital halftone file, and the first plurality of 

4 discrete digital values, produced by the sender printer 314. The sender printer 354 is 

5 further configured to perform the predetermined mathematical process (i.e., the same 

6 mathematical process as applied by sender printer 314) on the second plurality of 

7 discrete digital values to thereby generate a receiver authentication key. The receiver 

8 printer 354 can then display the receiver authentication key to a receiver, as for example 

9 by printing the digital halftoned file as the tangible document 360, which includes the 

10 authentication key 362. In the example depicted in Fig. 4, it is seen that the sender 

11 authentication key 322 and the receiver authentication key 362 are the same (both being 

12 the number "125691"), and therefore the electronic document file sent from the sender 

13 side 310 to the receiver side 350 is authenticated. 

14 It will be appreciated that the sender side 310 and the receiver side 350 of the 

15 system 300 depicted in Fig. 4 are essentially mirror images of one another. Thus, either 

16 side 310, 350 can act as "sender 1 ' or "receiver" of an electronic document file to be 

17 authenticated. It will also be appreciated that the authentication key generated by either 

18 the sender side 310 or the receiver side 350 can be stored or displayed in a number of 

19 different ways, in accordance with the description provided above with respect to the 

20 system 200 of Fig. 3. 
21 

22 While the above invention has been described in language more or less specific 

23 as to structural and methodical features, it is to be understood, however, that the 

24 invention is not limited to the specific features shown and described, since the means 

25 herein disclosed comprise preferred forms of putting the invention into effect. The 

26 invention is, therefore, claimed in any of its forms or modifications within the proper 

27 scope of the appended claims appropriately interpreted in accordance with the doctrine 

28 of equivalents. 
29 
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